$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: cwMHVAtOQB1RirlVGs3Zui+zsh3js4PUrJOQyWutABI= Subject key identifier: DA:B4:F1:C3:F1:2A:1D:70:56:0D:8B:EE:9D:D8:23:E6:5C:F6:55:3D Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 085AD697E709B5024594F78AC4E6208CEACEC86A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 0154 Signing time: Fri 09 May 2025 10:31:34 +0000 Manifest this update: Fri 09 May 2025 10:26:34 +0000 Manifest next update: Mon 12 May 2025 13:15:34 +0000 Files and hashes: 1: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg=) 2: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: h4QaJVX+vlUAkAuEm+DekLNP2NMscAhEZ05Jba535Xo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 13:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5a:d6:97:e7:09:b5:02:45:94:f7:8a:c4:e6:20:8c:ea:ce:c8:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: May 9 10:26:34 2025 GMT Not After : May 12 13:15:34 2025 GMT Subject: CN=DAB4F1C3F12A1D70560D8BEE9DD823E65CF6553D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1c:86:05:f6:d9:2c:bc:82:5d:81:82:e3:d1: b6:91:49:92:7c:05:f6:36:76:a3:20:b1:a9:a8:39: 18:1e:82:75:68:45:55:75:6d:e2:f8:4b:f1:69:04: 04:e5:cf:3c:78:dc:d4:6b:3b:4b:2a:6a:c8:48:0d: a6:08:1b:7e:ff:af:26:a3:17:d2:53:84:c7:f3:8e: 70:4d:8a:29:76:0f:77:50:b9:89:1d:0b:c0:aa:05: 75:2e:fc:6f:c8:80:4a:39:18:85:20:a3:76:32:ad: ec:43:bd:48:81:1e:74:d8:71:7f:b0:69:9f:8c:0e: e7:3c:4f:13:07:b6:4f:c6:0f:94:a1:03:b4:56:8a: b2:2f:88:91:71:43:cc:ba:9c:3d:6b:c2:9c:65:b4: 32:ed:aa:96:bc:24:4f:6d:b8:7b:0b:a5:6e:5c:c4: 30:d5:0e:d8:76:9f:9e:fb:d1:dd:e8:44:3f:65:b4: cc:38:2d:be:6b:04:a3:c8:ce:ab:56:83:26:0f:09: f4:d4:e1:90:de:58:86:00:51:d8:d2:fd:a1:58:cf: 0a:c1:41:76:3a:d8:fd:4d:c6:ba:e5:56:42:43:12: 07:4c:1a:7f:5e:66:5d:67:16:d2:db:c7:40:00:27: 89:02:41:37:43:42:1f:41:68:34:ce:c4:a4:00:0a: 5b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B4:F1:C3:F1:2A:1D:70:56:0D:8B:EE:9D:D8:23:E6:5C:F6:55:3D X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:ca:87:9d:53:67:7a:75:bd:3a:7e:9d:1a:f8:c9:06:b0:f6: ee:0c:dc:bb:6c:8d:a8:b0:d4:78:eb:e1:a4:7a:7b:8d:d4:37: 6d:e6:3d:b4:ed:94:a0:18:66:a3:6a:2f:b4:9b:29:ab:84:30: 4b:17:ff:01:be:57:e4:f7:24:6a:84:3f:1f:dd:18:57:d9:96: 2e:9c:09:2d:ce:98:ea:54:3e:1c:97:62:5b:e9:18:b6:58:96: 23:e8:a4:44:ba:75:ce:9b:0d:f0:ff:46:14:4a:d5:bb:f6:56: fe:08:f7:0a:43:f6:2f:7a:77:72:87:6a:ae:05:28:37:01:b6: f9:8c:40:44:2c:10:b8:5d:eb:77:02:ae:a0:c7:e6:08:a3:87: dd:21:77:04:88:5b:91:84:8d:ee:c2:df:ce:6b:29:95:7e:5c: 08:67:5d:00:b8:e8:81:7e:ec:b2:ba:b8:c0:1c:f2:d9:08:31: db:c4:3e:ce:56:6b:87:e9:52:47:78:19:bb:f7:2b:01:ab:1d: 5c:c8:36:3d:08:cb:b4:b8:4b:71:64:4e:9e:fa:36:2a:53:4e: 98:bd:cd:81:c8:56:02:43:69:b1:e0:53:ea:ea:d2:21:7e:a5: 5c:f6:0a:7c:43:32:fa:3e:31:a3:1b:fa:1a:c4:7b:dd:0f:2f: db:79:ac:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFrWl+cJtQJFlPeKxOYgjOrOyGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTA1MDkxMDI2MzRaFw0yNTA1MTIxMzE1MzRaMDMxMTAvBgNV BAMTKERBQjRGMUMzRjEyQTFENzA1NjBEOEJFRTlERDgyM0U2NUNGNjU1M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHIYF9tksvIJdgYLj0baRSZJ8 BfY2dqMgsamoORgegnVoRVV1beL4S/FpBATlzzx43NRrO0sqashIDaYIG37/ryaj F9JThMfzjnBNiil2D3dQuYkdC8CqBXUu/G/IgEo5GIUgo3YyrexDvUiBHnTYcX+w aZ+MDuc8TxMHtk/GD5ShA7RWirIviJFxQ8y6nD1rwpxltDLtqpa8JE9tuHsLpW5c xDDVDth2n5770d3oRD9ltMw4Lb5rBKPIzqtWgyYPCfTU4ZDeWIYAUdjS/aFYzwrB QXY62P1NxrrlVkJDEgdMGn9eZl1nFtLbx0AAJ4kCQTdDQh9BaDTOxKQAClsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2rTxw/EqHXBWDYvundgj5lz2VT0wHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHXKh51TZ3p1vTp+nRr4yQaw9u4M3Ltsjaiw 1Hjr4aR6e43UN23mPbTtlKAYZqNqL7SbKauEMEsX/wG+V+T3JGqEPx/dGFfZli6c CS3OmOpUPhyXYlvpGLZYliPopES6dc6bDfD/RhRK1bv2Vv4I9wpD9i96d3KHaq4F KDcBtvmMQEQsELhd63cCrqDH5gijh90hdwSIW5GEje7C385rKZV+XAhnXQC46IF+ 7LK6uMAc8tkIMdvEPs5Wa4fpUkd4Gbv3KwGrHVzINj0Iy7S4S3FkTp76NipTTpi9 zYHIVgJDabHgU+rq0iF+pVz2CnxDMvo+MaMb+hrEe90PL9t5rD8= -----END CERTIFICATE-----Generated at Sat May 10 06:28:22 2025 by rpki-client